ComplianceNIST 800-53 enhancement
NIST-AU-9(7) Store on Component with Different Operating System
- Framework
- NIST SP 800-53 rev5 (5.2.0)
- Family
- AU Audit and Accountability
- Control
- AU-9(7)
Control statement
Store audit information on a component running a different operating system than the system or component being audited.
Discussion
Storing auditing information on a system component running a different operating system reduces the risk of a vulnerability specific to the system, resulting in a compromise of the audit records.
Related
Enhancement of · Compliance (1)
- NIST-AU-9 Protection of Audit Information NIST 800-53 control
Related control · Compliance (4)
- NIST-AU-11 Audit Record Retention NIST 800-53 control
- NIST-AU-4 Audit Log Storage Capacity NIST 800-53 control
- NIST-AU-5 Response to Audit Logging Process Failures NIST 800-53 control
- NIST-SC-29 Heterogeneity NIST 800-53 control